# Top

**URL:** https://discuss.elastic.co/top.md?page=679&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 680

---

## [Solved: Elasticsearch 5.x fails to start in container in Docker for Windows](https://discuss.elastic.co/t/solved-elasticsearch-5-x-fails-to-start-in-container-in-docker-for-windows/80091)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [March 31, 2017, 6:49am UTC](https://discuss.elastic.co/t/solved-elasticsearch-5-x-fails-to-start-in-container-in-docker-for-windows/80091 "2017-03-31T06:49:47Z")

</div>

Background For some time, I have been successfully running Elasticsearch 2.x-based instances of the Elastic Stack in Docker containers using Docker for Windows. I use bespoke Dockerfiles based on images from sebp/elk (I…

---

## [Stats about requests/sec and response times](https://discuss.elastic.co/t/stats-about-requests-sec-and-response-times/6128)

<div class="topic-metadata">

**Author:** [@Florian\_Munz](https://discuss.elastic.co/u/Florian_Munz)\
**Replies:** 3\
**Last updated:** [December 12, 2011, 10:45pm UTC](https://discuss.elastic.co/t/stats-about-requests-sec-and-response-times/6128 "2011-12-12T22:45:02Z")

</div>

Hi, I'm looking for a way to graph requests/second and the response times for these requests. Is there a way to do this using the stats API calls or by configuring the logger? Cheers, Florian

---

## [Different Result when Query has Double Slash Escape (\\\\)](https://discuss.elastic.co/t/different-result-when-query-has-double-slash-escape/197434)

<div class="topic-metadata">

**Author:** [@salvadorcanillas](https://discuss.elastic.co/u/salvadorcanillas)\
**Replies:** 6\
**Last updated:** [September 2, 2019, 8:40am UTC](https://discuss.elastic.co/t/different-result-when-query-has-double-slash-escape/197434 "2019-09-02T08:40:19Z")

</div>

Hello, I am using Elasticsearch in Magento. Elasticsearch version 5.6 Magento Enterprise 2.2.9 I have set the sku type to keyword but getting a different result when query has escape character "sku": { "type": "key…

---

## [Why do we need logstash](https://discuss.elastic.co/t/why-do-we-need-logstash/309379)

<div class="topic-metadata">

**Author:** [@yugeeklab](https://discuss.elastic.co/u/yugeeklab)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:43pm UTC](https://discuss.elastic.co/t/why-do-we-need-logstash/309379 "2022-07-13T13:43:12Z")

</div>

I found out my Logstash has no logic except for forwarding log to Elasticsearch. Filebeat has many logic instead of Logstash(filtering etc.) In my case, Still do i need Logstash?? Why??

---

## [Invalid NEST response built from a unsuccessful (401) low level call on HEAD: /](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-401-low-level-call-on-head/243537)

<div class="topic-metadata">

**Author:** [@buka\_bidzina](https://discuss.elastic.co/u/buka_bidzina)\
**Replies:** 1\
**Last updated:** [August 3, 2020, 11:37pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-401-low-level-call-on-head/243537 "2020-08-03T23:37:01Z")

</div>

Invalid NEST response built from a unsuccessful (401) low level call on HEAD: / Audit trail of this API call: \[1\] BadResponse: Node: http://es.test.dev/ Exception: PipelineException Took: 00:00:00.1126819 OriginalExce…

---

## [Geoip help](https://discuss.elastic.co/t/geoip-help/50476)

<div class="topic-metadata">

**Author:** [@anoopmk007](https://discuss.elastic.co/u/anoopmk007)\
**Replies:** 8\
**Last updated:** [June 16, 2016, 6:53am UTC](https://discuss.elastic.co/t/geoip-help/50476 "2016-06-16T06:53:16Z")

</div>

Hello , I am trying to implement ELK for my customized logs. Almost done with my limited knowledge. Now logs are successfully parsing , storing in elasticsearch and showing in kibana. But like to include geo l…

---

## [Best method of delimiter splitting](https://discuss.elastic.co/t/best-method-of-delimiter-splitting/209095)

<div class="topic-metadata">

**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\
**Replies:** 2\
**Last updated:** [November 22, 2019, 6:30pm UTC](https://discuss.elastic.co/t/best-method-of-delimiter-splitting/209095 "2019-11-22T18:30:34Z")

</div>

Hello I have had a few fields with deliniter seperated strings that I have expanded into their own fields With grok Is that the best method ? Explanation: You have a field: ":foo:bar:goat" I want the first field, I…

---

## [Elasticsearch Ip restriction using NGINX](https://discuss.elastic.co/t/elasticsearch-ip-restriction-using-nginx/91145)

<div class="topic-metadata">

**Author:** [@navyagoli](https://discuss.elastic.co/u/navyagoli)\
**Replies:** 7\
**Last updated:** [July 5, 2017, 6:14pm UTC](https://discuss.elastic.co/t/elasticsearch-ip-restriction-using-nginx/91145 "2017-07-05T18:14:37Z")

</div>

Hi, I have elasticsearch instance running in my linux server on xxx.xxx.1.75: 9201. I have installed and configured NGINX on another server xxx.xx.1.89 and set the proxy for the elasticsearch to be running on port 5…

---

## [Nodes randomly disconnected](https://discuss.elastic.co/t/nodes-randomly-disconnected/16756)

<div class="topic-metadata">

**Author:** [@Hans\_Krijger](https://discuss.elastic.co/u/Hans_Krijger)\
**Replies:** 3\
**Last updated:** [April 1, 2015, 6:09am UTC](https://discuss.elastic.co/t/nodes-randomly-disconnected/16756 "2015-04-01T06:09:10Z")

</div>

We have a cluster running 1.0.0 in Azure using unicast discovery. Recently we started seeing exceptions like these in the logs: \[2014-04-01 21:40:22,720\]\[DEBUG\]\[action.admin.indices.status\] \[ES2PROD-M01\] \[usg-2…

---

## [Logstash parsers for +100 technologies](https://discuss.elastic.co/t/logstash-parsers-for-100-technologies/279308)

<div class="topic-metadata">

**Author:** [@nnovaes](https://discuss.elastic.co/u/nnovaes)\
**Replies:** 0\
**Last updated:** [July 21, 2021, 6:55pm UTC](https://discuss.elastic.co/t/logstash-parsers-for-100-technologies/279308 "2021-07-21T18:55:39Z")

</div>

The Cargill SIEM team has published this new project with a collection of logstash parser configs developed in house for multiple technologies. Logstash parsers are usually scattered around in gists and repos but this is…

---

## [Filebeat 7.0.0 on docker with Autodiscover and deploy mode: global](https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747)

<div class="topic-metadata">

**Author:** [@DieMal](https://discuss.elastic.co/u/DieMal)\
**Replies:** 0\
**Last updated:** [May 6, 2019, 10:59am UTC](https://discuss.elastic.co/t/filebeat-7-0-0-on-docker-with-autodiscover-and-deploy-mode-global/179747 "2019-05-06T10:59:51Z")

</div>

Hi guys, I'm trying to deploy a stack to a swarm using autodiscover configuration for Filebeat service 7.0.0 (https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html) , this is my filebeat…

---

## [Match any character regular expression does not match as expected](https://discuss.elastic.co/t/match-any-character-regular-expression-does-not-match-as-expected/278918)

<div class="topic-metadata">

**Author:** [@alexleen](https://discuss.elastic.co/u/alexleen)\
**Replies:** 6\
**Last updated:** [July 30, 2021, 2:31pm UTC](https://discuss.elastic.co/t/match-any-character-regular-expression-does-not-match-as-expected/278918 "2021-07-30T14:31:45Z")

</div>

POST /search\_test/\_doc { "text":"Jack and Jill went up the hill." } GET /search\_test/\_search?q=j%2A GET /search\_test/\_search?q=j... I would expect those two queries to return the same document since both of those regu…

---

## [Duration of events](https://discuss.elastic.co/t/duration-of-events/66069)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 6\
**Last updated:** [November 18, 2016, 10:59am UTC](https://discuss.elastic.co/t/duration-of-events/66069 "2016-11-18T10:59:55Z")

</div>

Hello, I'm loading a storage inventory periodically in Elasticsearch (once a week). Each time the whole inventory is parsed, all events have the same timestamp. I would like that for any visualisation made in a timeframe…

---

## [Using "xpack.security.enabled: true" on Windows](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829)

<div class="topic-metadata">

**Author:** [@JY\_DT](https://discuss.elastic.co/u/JY_DT)\
**Replies:** 4\
**Last updated:** [December 24, 2019, 10:35am UTC](https://discuss.elastic.co/t/using-xpack-security-enabled-true-on-windows/212829 "2019-12-24T10:35:33Z")

</div>

Hi, I have ElasticSearch setup on a Windows Server, and I'm trying to use XPack security in a Basic version of the product. I need to set this value in the elasticsearch.yml file on the Server, "xpack.security.enabled…

---

## [Help needed with Proper usage of scroll api using python: Getting the same results](https://discuss.elastic.co/t/help-needed-with-proper-usage-of-scroll-api-using-python-getting-the-same-results/136063)

<div class="topic-metadata">

**Author:** [@BoffinPanda](https://discuss.elastic.co/u/BoffinPanda)\
**Replies:** 4\
**Last updated:** [June 15, 2018, 2:26pm UTC](https://discuss.elastic.co/t/help-needed-with-proper-usage-of-scroll-api-using-python-getting-the-same-results/136063 "2018-06-15T14:26:42Z")

</div>

Hello all. I have to parse a document which has more than 10000 hits. The natural choice was to opt for scroll api. I have read the documentation from elastic and have done the following: import requests resp=request…

---

## [Multiple pipelines or tags or if or else if?](https://discuss.elastic.co/t/multiple-pipelines-or-tags-or-if-or-else-if/173974)

<div class="topic-metadata">

**Author:** [@Matthew\_Quickenden](https://discuss.elastic.co/u/Matthew_Quickenden)\
**Replies:** 2\
**Last updated:** [March 27, 2019, 6:16pm UTC](https://discuss.elastic.co/t/multiple-pipelines-or-tags-or-if-or-else-if/173974 "2019-03-27T18:16:21Z")

</div>

I'm new to logstash and I have been looking through the help guides and through the forums and I can't seem to find the answers I need. I am running ELK 6.6.0. I have 3 inputs I'd like to get into Elasticsearch. Sys…

---

## [Searching non-indexed fields](https://discuss.elastic.co/t/searching-non-indexed-fields/327033)

<div class="topic-metadata">

**Author:** [@kpachar](https://discuss.elastic.co/u/kpachar)\
**Replies:** 1\
**Last updated:** [March 6, 2023, 8:40am UTC](https://discuss.elastic.co/t/searching-non-indexed-fields/327033 "2023-03-06T08:40:00Z")

</div>

Hi everyone, Contrary to popular opinion, I'm able to search non-indexed fields in Elasticsearch. I'm wondering if this is is a bug or a newly introduced feature. I'm on Elasticsearch 8.6.2. The documentation says "Fie…

---

## [How to integrate the "metrics" and "trace" data](https://discuss.elastic.co/t/how-to-integrate-the-metrics-and-trace-data/278841)

<div class="topic-metadata">

**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\
**Replies:** 5\
**Last updated:** [July 20, 2021, 2:42pm UTC](https://discuss.elastic.co/t/how-to-integrate-the-metrics-and-trace-data/278841 "2021-07-20T14:42:44Z")

</div>

I want to integrate the "metrics" and "trace" data, the "metrics" data is grabbed by "prometheus". Now I use "openTelemetry" "receivers.prometheus\_simple" to collect the data and send it to "APM The data is sent to "APM"…

---

## [Limit Elasticsearch to 512 MB on Kubernetes](https://discuss.elastic.co/t/limit-elasticsearch-to-512-mb-on-kubernetes/234892)

<div class="topic-metadata">

**Author:** [@lucbas](https://discuss.elastic.co/u/lucbas)\
**Replies:** 5\
**Last updated:** [June 1, 2020, 3:51pm UTC](https://discuss.elastic.co/t/limit-elasticsearch-to-512-mb-on-kubernetes/234892 "2020-06-01T15:51:33Z")

</div>

Hi all I'm trying to set up elastic search on Kubernetes (GKE) and try to limit its memory usage to max 512MB (or even lower). Performance is not that crucial for us, we just need to run some Jaeger queries from time t…

---

## [Master keeps forgeting nodes](https://discuss.elastic.co/t/master-keeps-forgeting-nodes/23107)

<div class="topic-metadata">

**Author:** [@Joao\_Costa](https://discuss.elastic.co/u/Joao_Costa)\
**Replies:** 5\
**Last updated:** [April 8, 2015, 9:51am UTC](https://discuss.elastic.co/t/master-keeps-forgeting-nodes/23107 "2015-04-08T09:51:56Z")

</div>

I have 2 EC2 in an AWS account where it appears that the master keeps forgetting about the slave node. In the slave node logs (I removed the IPs and time for simplicity, the master is "Cordelia Frost" and the slav…

---

## [Mapping design with large number of child objects](https://discuss.elastic.co/t/mapping-design-with-large-number-of-child-objects/25333)

<div class="topic-metadata">

**Author:** [@wahlsw](https://discuss.elastic.co/u/wahlsw)\
**Replies:** 1\
**Last updated:** [January 31, 2017, 3:14pm UTC](https://discuss.elastic.co/t/mapping-design-with-large-number-of-child-objects/25333 "2017-01-31T15:14:51Z")

</div>

I have a question about performance when mapping documents with a parent-child relationship and a large number of children. The parent represents an entity, and children are sets of time series related to the parent. I…

---

## [Watcher: Internal Server Error](https://discuss.elastic.co/t/watcher-internal-server-error/131471)

<div class="topic-metadata">

**Author:** [@FYP\_2018](https://discuss.elastic.co/u/FYP_2018)\
**Replies:** 8\
**Last updated:** [May 14, 2018, 7:23am UTC](https://discuss.elastic.co/t/watcher-internal-server-error/131471 "2018-05-14T07:23:30Z")

</div>

Whenever I try to execute a watch i get a Watcher : Internal server error. Also when I try to test the watch using development tools , i get following error { "error": { "root\_cause": \[ { "type": "null\_pointer\_exc…

---

## [Snapshot restore from 1.7.4 to 2.1.2 cannot find files](https://discuss.elastic.co/t/snapshot-restore-from-1-7-4-to-2-1-2-cannot-find-files/67538)

<div class="topic-metadata">

**Author:** [@markcitizen](https://discuss.elastic.co/u/markcitizen)\
**Replies:** 7\
**Last updated:** [November 30, 2016, 8:05pm UTC](https://discuss.elastic.co/t/snapshot-restore-from-1-7-4-to-2-1-2-cannot-find-files/67538 "2016-11-30T20:05:22Z")

</div>

Hello, I'm trying to restore an index snapshot created on ES cluster v. 1.7.4 to an ES cluster running version 2.1.2. I was able to register a S3 repository (myRepo), and I can verify that the new cluster can access it. H…

---

## [Watcher - how to write painless script for looping aggregated buckets](https://discuss.elastic.co/t/watcher-how-to-write-painless-script-for-looping-aggregated-buckets/119449)

<div class="topic-metadata">

**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 5:13pm UTC](https://discuss.elastic.co/t/watcher-how-to-write-painless-script-for-looping-aggregated-buckets/119449 "2018-02-12T17:13:09Z")

</div>

Hi, I wrote a watcher to query some logs and aggregate using terms aggregations and under terms aggregations I wrote sub aggregation as follows "aggs": { "host\_wise": { "terms": { "field":…

---

## [How to ignore old logs](https://discuss.elastic.co/t/how-to-ignore-old-logs/83954)

<div class="topic-metadata">

**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Replies:** 6\
**Last updated:** [April 28, 2017, 9:27am UTC](https://discuss.elastic.co/t/how-to-ignore-old-logs/83954 "2017-04-28T09:27:40Z")

</div>

Hi All, I have scenario like below. Gatewaylogs --\> Logstash --\> Kafka --\> Logstash --\>Elasticsearch --\> Kibana I am able to push the logs my machine to Kibana. Now the issue is whenever i am doing some changes in …

---

## [Rename fields in the search output](https://discuss.elastic.co/t/rename-fields-in-the-search-output/196850)

<div class="topic-metadata">

**Author:** [@arsenmk](https://discuss.elastic.co/u/arsenmk)\
**Replies:** 3\
**Last updated:** [August 28, 2019, 12:12am UTC](https://discuss.elastic.co/t/rename-fields-in-the-search-output/196850 "2019-08-28T00:12:15Z")

</div>

Is there a way to rename the fields in the output similar to how you can do field aliases in SQL, e.g.: "SELECT lastname AS surname FROM people" ? Note, I want only the output be changed, not the stored fields or any map…

---

## [Kibana changes timezone from UTC to CST when exporting to CSV](https://discuss.elastic.co/t/kibana-changes-timezone-from-utc-to-cst-when-exporting-to-csv/165491)

<div class="topic-metadata">

**Author:** [@slm](https://discuss.elastic.co/u/slm)\
**Replies:** 3\
**Last updated:** [January 28, 2019, 9:28pm UTC](https://discuss.elastic.co/t/kibana-changes-timezone-from-utc-to-cst-when-exporting-to-csv/165491 "2019-01-28T21:28:30Z")

</div>

One of our analysts noticed that when you generate a report in Kibana (v. 6.5.4, the resulting CSV changes all timestamps to EST time rather than using the time zone configured in dateFormat:tz (currently set to UTC). I …

---

## [Logstash support to AIX?](https://discuss.elastic.co/t/logstash-support-to-aix/69400)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [December 19, 2016, 7:31am UTC](https://discuss.elastic.co/t/logstash-support-to-aix/69400 "2016-12-19T07:31:05Z")

</div>

Hi, Does Logstash supports to AIX? We have some ESB logs on AIX machine, those we want to ship to some remote RHEL server in files, OR to logstash instance running on RHEL machine. Now we have 3 options. 1) LSF (AIX vers…

---

## [\[ANNOUNCEMENT\] Elasticsearch analysis lemmagen plugin update](https://discuss.elastic.co/t/announcement-elasticsearch-analysis-lemmagen-plugin-update/120707)

<div class="topic-metadata">

**Author:** [@vhyza](https://discuss.elastic.co/u/vhyza)\
**Replies:** 2\
**Last updated:** [May 18, 2020, 4:15pm UTC](https://discuss.elastic.co/t/announcement-elasticsearch-analysis-lemmagen-plugin-update/120707 "2020-05-18T16:15:52Z")

</div>

Hi, back in 2013 I wrote plugin which provides jLemmaGen lematizer with some prebuilt lexicons as elasticsearch token filter. As it turned out, lexicon license was very restrictive. The plugin was usable only for non-co…

---

## [Elasticsearch-create-enrollment-token using IP from wrong ethernet adaptor](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999)

<div class="topic-metadata">

**Author:** [@vimalv](https://discuss.elastic.co/u/vimalv)\
**Replies:** 5\
**Last updated:** [December 14, 2022, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999 "2022-12-14T10:55:52Z")

</div>

Hi, We have two ethernet adaptors and hence 2 IPs, When we try to generate enrollment token, it always uses 2nd IP by default. Is there any way to override the default and specify which IP to use or can we use hostname…

---

## [3-Node cluster setup](https://discuss.elastic.co/t/3-node-cluster-setup/322420)

<div class="topic-metadata">

**Author:** [@Sandeepa\_Kariyawasam](https://discuss.elastic.co/u/Sandeepa_Kariyawasam)\
**Replies:** 4\
**Last updated:** [January 5, 2023, 5:06am UTC](https://discuss.elastic.co/t/3-node-cluster-setup/322420 "2023-01-05T05:06:15Z")

</div>

I have created a Elasticsearch node with enrolment token configured. Now I'm trying to attach two other nodes to the running node as a cluster. It gave this error, This node will be reconfigured to join an existing clus…

---

## [Elasticsearch dump using python](https://discuss.elastic.co/t/elasticsearch-dump-using-python/233254)

<div class="topic-metadata">

**Author:** [@vikasmastud](https://discuss.elastic.co/u/vikasmastud)\
**Replies:** 4\
**Last updated:** [May 19, 2020, 9:47am UTC](https://discuss.elastic.co/t/elasticsearch-dump-using-python/233254 "2020-05-19T09:47:36Z")

</div>

i am trying to dump elastic search from one Elasticsearch and import this dump to different Elasticsearch is there any way to do that using python

---

## [Metricbeat Haproxy dashboards](https://discuss.elastic.co/t/metricbeat-haproxy-dashboards/162784)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 4\
**Last updated:** [January 14, 2019, 4:03pm UTC](https://discuss.elastic.co/t/metricbeat-haproxy-dashboards/162784 "2019-01-14T16:03:38Z")

</div>

Hello Team, I have configured Metricbeat Haproxy Module and i am getting the data over kibana dashboard under Metricbeat Haproxy Dashboards. I am able to see 6 dashboards for only Metricbeat Haproxy which are listed be…

---

## [Coordinate/projection system in geo point](https://discuss.elastic.co/t/coordinate-projection-system-in-geo-point/15753)

<div class="topic-metadata">

**Author:** [@Francois\_Brunet](https://discuss.elastic.co/u/Francois_Brunet)\
**Replies:** 4\
**Last updated:** [August 27, 2016, 12:54am UTC](https://discuss.elastic.co/t/coordinate-projection-system-in-geo-point/15753 "2016-08-27T00:54:03Z")

</div>

Which coordinate or projection type do you support in geo location point? I have a look at the GeoDistance class and it appear that GPS coordinate will return the most accurate distance. Could you confirm this poin…

---

## [Facets/Aggregations and excluding filters](https://discuss.elastic.co/t/facets-aggregations-and-excluding-filters/27819)

<div class="topic-metadata">

**Author:** [@pzaleski](https://discuss.elastic.co/u/pzaleski)\
**Replies:** 1\
**Last updated:** [August 21, 2015, 11:44am UTC](https://discuss.elastic.co/t/facets-aggregations-and-excluding-filters/27819 "2015-08-21T11:44:32Z")

</div>

We're currently evaluating elastic 1.7 vs solr 5. One of the use cases are Facets/Aggregations with filters. When filter is set for faceted/aggregated filter it should be excluded, so we won't get just one result. In …

---

## [How to use pagination with new Java Client](https://discuss.elastic.co/t/how-to-use-pagination-with-new-java-client/339460)

<div class="topic-metadata">

**Author:** [@Andre\_Schmer](https://discuss.elastic.co/u/Andre_Schmer)\
**Replies:** 0\
**Last updated:** [July 27, 2023, 4:42pm UTC](https://discuss.elastic.co/t/how-to-use-pagination-with-new-java-client/339460 "2023-07-27T16:42:24Z")

</div>

Trying to use a search\_after with the new Java API. That s what i did so far: SearchResponse\<PeriodInventory\> sr = newClient.search(searchRequest, PeriodInventory.class); List\<Hit\<PeriodInventory\>\> searchHits = sr.h…

---

## [Script exception runtime error](https://discuss.elastic.co/t/script-exception-runtime-error/305689)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 3\
**Last updated:** [May 30, 2022, 3:07pm UTC](https://discuss.elastic.co/t/script-exception-runtime-error/305689 "2022-05-30T15:07:19Z")

</div>

Hi there, i have created scripted field for one of my index and here is the script: def path = doc\['request\_id.keyword'\].value; if (path != null) { def first = path.indexOf("\_"); def second = first + 1 + pat…

---

## [Timestamp field with local timezone!](https://discuss.elastic.co/t/timestamp-field-with-local-timezone/160238)

<div class="topic-metadata">

**Author:** [@alexwbai](https://discuss.elastic.co/u/alexwbai)\
**Replies:** 3\
**Last updated:** [December 17, 2018, 6:04pm UTC](https://discuss.elastic.co/t/timestamp-field-with-local-timezone/160238 "2018-12-17T18:04:18Z")

</div>

Sorry I know these timezone questions have been beaten to death but I'm really having trouble finding the solution to this problem: This is what I want to do: Take existing epoch time integer field (eg. 1544471514) an…

---

## [Kiabana load balancing](https://discuss.elastic.co/t/kiabana-load-balancing/58311)

<div class="topic-metadata">

**Author:** [@vienodp](https://discuss.elastic.co/u/vienodp)\
**Replies:** 3\
**Last updated:** [September 2, 2016, 11:56am UTC](https://discuss.elastic.co/t/kiabana-load-balancing/58311 "2016-09-02T11:56:40Z")

</div>

Hi We have configured two ELK instances with Shield , marvel plugin. We are using SSL/TLS encryption in this cluster. My both instances of kibana are accessible using their individual URLs e.g. https://host1:5601 I …

---

## [Null value causing errors?](https://discuss.elastic.co/t/null-value-causing-errors/56675)

<div class="topic-metadata">

**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Replies:** 3\
**Last updated:** [July 29, 2016, 4:34am UTC](https://discuss.elastic.co/t/null-value-causing-errors/56675 "2016-07-29T04:34:49Z")

</div>

im receiving this error: "reason"=\>"failed to parse \[entry.AppId.raw\]", "caused\_by"=\>{"type"=\>"illegal\_state\_exception", "reason"=\>"Can't get text on a END\_OBJECT at 1:2285"} i see this value: "AppId"=\>\[{}\] Here is …

---

## [Pushing flush onto Pipeline](https://discuss.elastic.co/t/pushing-flush-onto-pipeline/47802)

<div class="topic-metadata">

**Author:** [@Mag\_Carl](https://discuss.elastic.co/u/Mag_Carl)\
**Replies:** 3\
**Last updated:** [April 19, 2016, 2:49pm UTC](https://discuss.elastic.co/t/pushing-flush-onto-pipeline/47802 "2016-04-19T14:49:31Z")

</div>

I am trying to get twitter feed using below config file input { twitter { add your data consumer\_key =\> "\*\*\*\*\*\*\*\*\*\*\*" consumer\_secret =\>"\*\*\*\*\*\*\*\*\*\*\*" oauth\_token =\> "\*\*\*\*\*\*\*\*\*\*\*" oauth\_token\_secret =\> "\*\*\*\*\*\*\*\*\*\*\*" k…

---

## [Is Sense available with Marvel 2.1](https://discuss.elastic.co/t/is-sense-available-with-marvel-2-1/36005)

<div class="topic-metadata">

**Author:** [@twhetzel](https://discuss.elastic.co/u/twhetzel)\
**Replies:** 6\
**Last updated:** [December 1, 2015, 10:41pm UTC](https://discuss.elastic.co/t/is-sense-available-with-marvel-2-1/36005 "2015-12-01T22:41:22Z")

</div>

I'm following the intro video ( https://www.elastic.co/webinars/get-started-with-elasticsearch ) and it shows a tool called Sense to easily edit queries for ES. Is this tool still available and if so what URL can it be a…

---

## [Elastic APM GeoIP Pipeline](https://discuss.elastic.co/t/elastic-apm-geoip-pipeline/162622)

<div class="topic-metadata">

**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\
**Replies:** 5\
**Last updated:** [January 4, 2019, 1:06pm UTC](https://discuss.elastic.co/t/elastic-apm-geoip-pipeline/162622 "2019-01-04T13:06:08Z")

</div>

Hi, we want to enrich our Elastic-APM RUM data with GeoIP information and are wondering what the best place is to put it into: Elasticsearch Ingest Pipeline Logstash (but it means having to route from Elastic-APM to Lo…

---

## [Avoid es.mapping.id field duplication](https://discuss.elastic.co/t/avoid-es-mapping-id-field-duplication/66851)

<div class="topic-metadata">

**Author:** [@Rishav\_Rohit1](https://discuss.elastic.co/u/Rishav_Rohit1)\
**Replies:** 2\
**Last updated:** [November 30, 2016, 10:00am UTC](https://discuss.elastic.co/t/avoid-es-mapping-id-field-duplication/66851 "2016-11-30T10:00:37Z")

</div>

Hi, I am using ElasticSearch Hadoop (2.4.0) connector for storing documents in ES. I have "record\_id" field in my document which is used as \_id field using below configuration setting conf.set("es.mapping.id", "record\_…

---

## [Elasitcsearch cluster with docker swarm](https://discuss.elastic.co/t/elasitcsearch-cluster-with-docker-swarm/127712)

<div class="topic-metadata">

**Author:** [@8e6d5b4d49f69e9edb4c](https://discuss.elastic.co/u/8e6d5b4d49f69e9edb4c)\
**Replies:** 0\
**Last updated:** [April 12, 2018, 1:46am UTC](https://discuss.elastic.co/t/elasitcsearch-cluster-with-docker-swarm/127712 "2018-04-12T01:46:36Z")

</div>

Hi, all. I tried to run Elasticsearch cluster with docker swarm. However, there is a problem described in https://github.com/elastic/elasticsearch-docker/issues/91#issuecomment-319679786. Solutions from above issue ar…

---

## [How to create a scrollable vega visualization](https://discuss.elastic.co/t/how-to-create-a-scrollable-vega-visualization/207886)

<div class="topic-metadata">

**Author:** [@nashwin2804](https://discuss.elastic.co/u/nashwin2804)\
**Replies:** 4\
**Last updated:** [November 15, 2019, 12:38pm UTC](https://discuss.elastic.co/t/how-to-create-a-scrollable-vega-visualization/207886 "2019-11-15T12:38:09Z")

</div>

Hi, I am using Kibana version 7.4 I want help in creating a scrollable vega visualization. Use Case: I would like to show only up to 20 tick values in the x-axis of a bar chart, if a user wants to view more than that…

---

## [Can't Edit Kibana Dashboard: Forbidden](https://discuss.elastic.co/t/cant-edit-kibana-dashboard-forbidden/186033)

<div class="topic-metadata">

**Author:** [@amin.nugroho](https://discuss.elastic.co/u/amin.nugroho)\
**Replies:** 4\
**Last updated:** [June 20, 2019, 4:06am UTC](https://discuss.elastic.co/t/cant-edit-kibana-dashboard-forbidden/186033 "2019-06-20T04:06:22Z")

</div>

Hi I am using kibana 6.6.1 with 3 elastic data nodes and 1 apm node I am having issues in which I cant edit kibana dashbord with error: forbidden Is it because I tried the trial license and then reverted back to basic…

---

## [How to exclude the particular type in search](https://discuss.elastic.co/t/how-to-exclude-the-particular-type-in-search/6116)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 4\
**Last updated:** [December 16, 2011, 4:53am UTC](https://discuss.elastic.co/t/how-to-exclude-the-particular-type-in-search/6116 "2011-12-16T04:53:20Z")

</div>

Hi there, I do fave a case, where i do have almost 50 types in one index, i want all those types to be searchable in the search, but not some particular two types, so i think including all that 48 types…

---

## [TCP/UDP VS syslog](https://discuss.elastic.co/t/tcp-udp-vs-syslog/322927)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 3\
**Last updated:** [January 11, 2023, 1:31pm UTC](https://discuss.elastic.co/t/tcp-udp-vs-syslog/322927 "2023-01-11T13:31:40Z")

</div>

What is differences between the below. input { tcp { port =\> 514 type =\> syslog } udp { port =\> 514 type =\> syslog } } VS input { syslog { port =\> 514 } } If I need to receive syslog m…

---

## [Monitoring of an application on a tomcat](https://discuss.elastic.co/t/monitoring-of-an-application-on-a-tomcat/271047)

<div class="topic-metadata">

**Author:** [@Nigmur](https://discuss.elastic.co/u/Nigmur)\
**Replies:** 8\
**Last updated:** [May 18, 2021, 4:03pm UTC](https://discuss.elastic.co/t/monitoring-of-an-application-on-a-tomcat/271047 "2021-05-18T16:03:53Z")

</div>

Hi everyone, I am having issues in monitoring a java application inside a tomcat. I am monitoring the tomcat with a java agent and i see everything correctly. But when i install an application on it it seems that i can'…

[Previous page](https://discuss.elastic.co/top.md?page=678&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=680&per_page=50&period=all)
